Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: bZTiZn/PPtbXNR1nGKP99e5knUvU+Mk8LXp6JniuzU0=
Subject key identifier: A9:98:2C:B0:40:0C:68:31:EF:48:66:E5:3E:F6:34:1B:8A:0E:D2:9F
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019352AD7491FDAEA454BA95FEE87C505D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 07:01:59 +0000
Manifest this update: Fri 22 Nov 2024 07:01:59 +0000
Manifest next update: Sat 23 Nov 2024 07:01:59 +0000
Files and hashes: 1: 1YLEReoTsoIiTdjxeJTGKhPr3V4.roa (hash: 5fECA8Btkf5VayIY5gExJe6XMIB2GNwjWAXLak/5BzE=)
2: 7LBZszIZhGNOVscwpU51_2NKk-k.roa (hash: pCzZ9q2je54+Cj1SRbBRhMeveAKNMdKXxB3ATFJo4sY=)
3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: nS96cWDhm/0J8ewFRK9fRS6AvD23lJSQCiNrHfjHdYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:74:91:fd:ae:a4:54:ba:95:fe:e8:7c:50:5d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Nov 22 07:01:59 2024 GMT
Not After : Nov 23 07:01:59 2024 GMT
Subject: CN=a9982cb0400c6831ef4866e53ef6341b8a0ed29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:31:01:9a:0c:78:41:d7:2b:bf:e9:00:93:75:
97:a5:f8:54:48:38:bf:c2:35:a5:b0:c3:71:ae:65:
1e:57:2a:d0:a6:6d:28:7a:c5:82:82:a6:39:11:d4:
9a:5b:e2:78:ec:67:ec:ad:3e:84:f6:14:44:f4:cf:
f9:e1:56:73:a9:28:b0:2e:dc:94:36:30:48:67:cb:
d2:9e:1e:57:27:a6:7c:69:81:7e:96:ee:9b:24:31:
4a:8c:e3:9c:92:32:51:34:aa:6b:22:81:6b:7f:31:
e8:9a:9a:35:49:57:e1:5a:18:a7:90:6d:75:db:4f:
55:51:17:d0:7f:46:7f:81:72:85:53:8d:a3:a1:4c:
14:95:52:55:8b:6b:05:bc:94:d7:86:25:16:ab:2b:
39:be:15:4d:9b:fc:a9:a7:d0:e7:e1:1e:c2:13:f5:
b0:b2:16:7c:66:f8:18:d5:c8:64:f6:fe:31:ff:a5:
8e:4e:98:78:30:eb:fa:11:be:c3:aa:f6:f1:02:fc:
25:98:9d:6e:19:bc:7e:a6:9e:0a:6e:83:e3:41:d7:
c7:c6:7b:66:92:9a:67:86:64:f8:c0:9a:70:7e:62:
5b:dc:c3:63:26:68:89:6a:04:fe:8f:08:b7:44:ae:
f8:ec:fc:0f:b6:88:f4:78:43:3c:a5:2d:82:47:73:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:2C:B0:40:0C:68:31:EF:48:66:E5:3E:F6:34:1B:8A:0E:D2:9F
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:43:35:90:fe:34:15:2d:cc:31:15:cb:e7:62:52:dd:d7:b8:
af:a2:db:59:60:3a:c6:c5:a2:9f:33:fd:d4:cf:52:0f:71:32:
04:d8:24:00:ef:cd:7b:65:47:7b:95:19:de:4f:79:76:99:76:
f7:61:90:8f:4c:52:cc:a3:88:a2:be:79:38:50:3d:eb:7b:60:
59:28:af:7e:40:b5:9b:29:c2:43:f1:a2:55:cf:6a:b3:23:df:
6d:68:b5:b5:7b:2c:c5:8b:2f:40:d7:0c:ef:8a:9c:12:df:dd:
17:f4:74:0b:47:97:fd:85:28:b9:d4:ee:da:f7:86:6f:cd:90:
6f:23:88:34:1b:9b:d4:b3:8e:0d:85:ab:15:4e:b7:c8:bd:10:
7d:63:79:3e:a2:0c:75:51:f0:d8:1d:bc:c9:5e:0a:bb:6e:89:
62:5b:3b:c8:07:6e:2a:58:a5:b0:32:b3:61:2a:55:ef:ba:0e:
ac:e4:96:b3:c2:41:87:b8:83:20:09:e3:5c:15:24:7b:2f:9b:
1c:c6:90:6b:d3:62:58:eb:46:88:1c:a8:f4:db:75:2d:3c:af:
6c:7f:f5:fc:94:12:2a:16:71:4e:e8:60:07:da:89:fc:da:d8:
d2:ec:f8:de:ac:45:06:bb:d2:34:3a:4a:3d:f6:0e:42:e0:de:
d5:e1:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:09:41 2024 by rpki-client on console-ams.rpki-client.org